You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
AuthArea: what it touches
ImprovementsKind: in v2.1.321,
ImprovementsSection of the release
What
OAuth is the sign-in method Claude Code uses, and scopes are the permissions it asks for when you sign in. When the environment variable CLAUDE_CODE_CUSTOM_OAUTH_URL is set, so that Claude Code signs in through a different address, the scope settings now turn every default permission request off. They also record CLAUDE_CODE_CUSTOM_OAUTH_URL as the reason the defaults were cleared.
Why
If you use a custom sign-in address, expect the default permissions not to be requested.